Re: [Freeipa-users] group membership listing?

2015-04-21 Thread Rob Crittenden
Janelle wrote:
 Hello - and happy day before Earth Day,
 
 Perhaps this is an easy one and related to replication, BUT:
 
 $ id some-user-name
 
 If I run that on every IPA master, should the listing not be identical?
 In other words, the listing of the uid, gid and groups, should show up
 in exactly the same order?
 
 uid=12345(some-user) gid=101(agroup) groups=101(agroup), 102(another),
 103(another2)
 
 What if one replica listed it as:
 
 uid=12345(some-user) gid=101(agroup) groups=101(agroup), 103(another2),
 102(another)
 
 But all the others listed as the first line? Is that indication of a
 problem?

It may be related to the fact that LDAP doesn't guarantee order and no
sorting is done. It is probably not a big deal as long as all the data
is there.

The SSSD guys may have an opinion on it too.

rob

-- 
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project


Re: [Freeipa-users] group membership listing?

2015-04-21 Thread Alexander Bokovoy

On Tue, 21 Apr 2015, Rob Crittenden wrote:

Janelle wrote:

Hello - and happy day before Earth Day,

Perhaps this is an easy one and related to replication, BUT:

$ id some-user-name

If I run that on every IPA master, should the listing not be identical?
In other words, the listing of the uid, gid and groups, should show up
in exactly the same order?

uid=12345(some-user) gid=101(agroup) groups=101(agroup), 102(another),
103(another2)

What if one replica listed it as:

uid=12345(some-user) gid=101(agroup) groups=101(agroup), 103(another2),
102(another)

But all the others listed as the first line? Is that indication of a
problem?


It may be related to the fact that LDAP doesn't guarantee order and no
sorting is done. It is probably not a big deal as long as all the data
is there.

Not even LDAP but POSIX in general does not give you an ordered
guarantee for groups you are member of. There is a primary group always
and the rest of groups are 'supplementary', without any ordering.


--
/ Alexander Bokovoy

--
Manage your subscription for the Freeipa-users mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-users
Go to http://freeipa.org for more info on the project